Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/QgYSWYViJJmoRNUVU6nREB3hDQw.roa
File: QgYSWYViJJmoRNUVU6nREB3hDQw.roa (raw, json)
Hash identifier: 6WSFW32qlHJqLCGuYHQoii6uBj5Z+5/tFSFCoMD97/8=
Subject key identifier: 42:06:12:59:85:62:24:99:A8:44:D5:15:53:A9:D1:10:1D:E1:0D:0C
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 018697F4C3300443B6ECD4B097C130EDADDC
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/QgYSWYViJJmoRNUVU6nREB3hDQw.roa
Signing time: Tue 28 Feb 2023 12:17:25 +0000
ROA not before: Tue 28 Feb 2023 12:17:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 45.83.136.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:f4:c3:30:04:43:b6:ec:d4:b0:97:c1:30:ed:ad:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Feb 28 12:17:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4206125985622499a844d51553a9d1101de10d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:99:06:49:a0:99:05:c2:4d:2f:a3:ba:17:
d7:9a:99:f5:0b:04:6b:fc:d4:a5:b6:9c:17:49:c5:
98:89:cc:a9:73:0c:cf:9a:eb:f5:74:72:15:db:1c:
72:ee:72:eb:e8:59:f3:d8:65:a9:48:12:60:93:ba:
ff:71:a2:24:2f:3a:a5:5c:75:25:82:ce:35:e8:43:
c7:b4:ad:2a:b6:a9:9e:f0:ee:1f:dc:e8:41:0f:80:
fa:b0:f2:3b:62:22:6e:64:1b:5a:1a:8b:e1:dc:5d:
6b:e8:09:7f:4a:eb:43:37:eb:2a:0a:f8:a1:bf:1a:
cb:7c:57:58:1e:90:bd:39:46:23:1c:47:4a:94:fb:
33:77:bd:23:62:5e:e7:09:62:d7:1d:3c:5d:72:57:
fd:d9:91:0e:f5:64:69:9b:64:ba:88:d8:c2:a0:7f:
dd:25:c6:c7:6c:9c:bf:17:fa:dd:e1:5a:22:eb:83:
00:91:65:1b:90:0f:36:a3:87:db:cf:90:3e:a9:13:
b7:6b:05:82:0b:b2:67:e8:fb:aa:cb:c2:40:e7:b3:
bb:8f:d0:2d:f9:bd:9c:67:cb:17:a4:10:4b:b2:7f:
42:80:ec:f3:79:d5:14:21:a2:85:27:05:05:84:ce:
08:74:aa:80:5e:10:22:64:73:cf:2d:bb:7f:08:2d:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:06:12:59:85:62:24:99:A8:44:D5:15:53:A9:D1:10:1D:E1:0D:0C
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/QgYSWYViJJmoRNUVU6nREB3hDQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.136.0/22
Signature Algorithm: sha256WithRSAEncryption
84:c6:78:2a:ec:cf:44:43:ec:16:1a:83:5a:a2:26:94:ab:fa:
d4:b2:2d:0d:d1:de:8c:a8:bb:f4:d4:6a:cc:b8:fd:dc:eb:14:
fc:7b:8b:b2:02:c1:c9:81:f6:7a:fa:4f:e1:76:56:36:b0:18:
20:d6:0b:41:91:c6:31:86:19:93:b0:b5:14:d6:b4:71:b9:25:
2c:09:b5:3d:80:4d:40:10:14:06:2e:4e:82:f8:fc:36:c9:7b:
6b:55:3a:b6:a1:cf:20:db:d1:6a:be:14:bf:9d:6a:c0:0f:cc:
e4:31:31:c6:29:70:5a:30:a9:93:23:ba:84:67:a0:00:76:77:
61:79:b8:1a:2a:16:68:d1:88:94:fd:de:6c:4b:17:5b:c0:ad:
a9:55:45:46:40:11:05:82:d2:70:99:1f:57:2d:58:18:14:a4:
9e:d7:f6:b6:03:ad:08:43:b4:6c:f1:50:c5:25:08:d9:97:b4:
66:5e:f1:71:7b:c0:6b:bb:c0:9b:2e:d1:59:13:3e:04:67:7b:
00:62:d0:ff:ec:9d:a3:fc:a2:fe:24:41:07:dd:ac:a0:b3:c4:
8e:50:67:9f:3f:d5:7c:85:ee:2e:1d:26:fe:38:3e:f6:91:40:
26:f6:c8:4f:a7:68:af:2b:33:8f:14:b0:6d:cb:81:dd:c8:c1:
73:ea:33:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:54 2023 by rpki-client on console-ams.rpki-client.org